Hi all,
My site is almost finished, and I just added a whole ADMIN section where I can update/edit my SQL database via easy-to-use forms. On Page one I use php to require a superuser password, and if correct, I set a $_SESSION variable that enables you to see every other admin page (I do a check for the variable at the top of the page and exit if not there).
I know I've read stuff about somehow encrypting (hashing?) the password, but I don't know what that means. If anyone can point me in the right direction, I'd like to keep things as secure as possible.
Also, I've heard there are ways to prevent people from running scripts on your site. How is that accomplished?
Finally, what's the best way to prevent people from direct linking to my site folders? For example, if you go to mysite.com/images right now, you can see all my images listed. Any way to prevent that?
Thanks in advance for the help. I know nothing about site security, and it's probably time to learn.
3  1346 
You can use the md5 functions in php to hash the password before saving.
For direct linking you can use check the referring page to see if it comes from your domain and if not don't allow it
- Shelon Padmore
If you are storing the password in a session variable then it may be worth encrypting the password.
But password encryption is normally used when storing it somewhere eg a database.
Check out this article, you can probably ignore the registration part and just look at the login information. Link Sign in to post your reply or Sign up for a free account.
Similar topics | |
by: Laphan |
last post by:
Hi All
I know this might sound a strange subject post, but I'm doing a photography
web site and I'd like to make an effect whereby my pictures are a sort of
slanted, drawing pin to the wall Polaroid for each one. This may sound like
a quick PSPro or Photoshop job, but the problems are as follows:
1) A user with no artistic knowledge will be uploading standard rectangle
pictures to this web site on a regular basis.
|
by: sberk44 |
last post by:
Hey,
I could really use some help or be directed to the right place for the
answer. I am creating a shopping cart and the cart is being stored in
a dataset that is being saved in Session. IE
Session("ShoppingCart") = ShoppingCartDS
Where ShoppingCartDS is the dataset. This is working great until i
need to move to the Secure site which our company hosts one secure
certificate for many sites. I will be moving from:
|
by: Brad |
last post by:
I have a win2003 server workstation with multiple webs, each web has it's
own ip address. In VS2005, if I select to open an existing web site, select
Local IIS, the dialog correctly displays a list of all of my webs, however
if I attempt to open a site under and web other than localhost I receive the
message:
"Unable to open the Web 'http://localhost/anywebappname'. The Web
'http://localhost/anywebappname' does not exist"
Obviously...
|
by: barryfz |
last post by:
I need to be able to move from one web app on my server to another on the
same server and preserve the session state. I have played with
server.transfer but I get an error saying I can't do this. How can I
accomplish this. I don't think redirects with session state being passed in
the url makes any sense from a security standpoint.
--
Barry
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
| | |
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert into image.
Globals.ThisAddIn.Application.ActiveDocument.Select();...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
| | |
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
|
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |
